Google Workspace Marketplace: the privacy policy link your listing needs

By Paul Cranmer, Founder · Last verified October 2026 · Google Cloud console · Google Workspace Marketplace SDK → Store Listing

A Workspace add-on or app reaches the Marketplace through the Google Workspace Marketplace SDK in the Cloud console, and its Store Listing page has a Support links section with three required fields: Terms of service, Privacy policy and Support. The program policies add the substance: a product that handles personal or sensitive user data must post a privacy policy that comprehensively discloses how the product collects, uses and shares user data, including the types of parties it is shared with, and the link belongs both in the Marketplace SDK field and in the OAuth client configuration. This page shows the two places and the four things the page must say.

Who this is for

Developers whose Marketplace listing will not publish because Support links are incomplete
Teams publishing an Editor add-on, Chat app or Drive app
Anyone updating a listing after adding scopes

Not for

Chrome Web Store extensions (a different store with its own privacy tab)
Private, domain-restricted listings that skip the public review

What the platform requires

Store Listing → Support links: Terms of service (a link to a web page that describes your terms of service), Privacy policy (a link to a web page that describes your privacy policy), Support (how users get help). All three are required.
Path: Google Cloud console → Menu → APIs & Services → Google Workspace Marketplace SDK → Store Listing.
Program policies: a product that handles personal or sensitive user data must post a privacy policy and handle the data securely; the policy must comprehensively disclose how the product collects, uses and shares user data, including the types of parties it is shared with.
The policy link is placed in the designated field in the Marketplace SDK and in the OAuth client configuration (the consent screen).

Get a live URL first

A Workspace app is an API/SDK integration in the wizard (free path). Name it, list the Google data it reads (Docs, Sheets, Drive, Gmail scopes) and who it shares with, and paste the live URL in the Marketplace SDK and on the consent screen. If you will also go through OAuth verification, host the same text on your own domain (see the OAuth verification how-to).

Get the privacy policy URL for your Workspace app (free)

Step-by-step: paste your privacy policy URL

Create the privacy policy page. Run the wizard as API/SDK with the Google scopes the app uses and the third parties that receive data. Copy the live URL.
Open the Marketplace SDK Store Listing. Google Cloud console → APIs & Services → Google Workspace Marketplace SDK → Store Listing. Fill App Details, Graphic Assets, Screenshots and Support Links.
Enter the three support links. Terms of service, Privacy policy, Support: each a public web page. Save.
Add the same privacy link to the OAuth consent screen. APIs & Services → OAuth consent screen → Branding → Application privacy policy link. The program policies expect the link in both places.
Publish and keep the page current. Submit the listing for review. When you add scopes later, update the policy text behind the same URL before resubmitting.

Field labels to look for

Marketplace SDK → Store Listing → Support links: Terms of service, Privacy policy, Support: required.
OAuth consent screen → Branding: Application privacy policy link: the second required placement.

Common reasons the form fails

A policy that does not name the types of parties data is shared with
Different privacy links in the listing and on the consent screen
A listing published before the policy covered newly added scopes

Get the privacy policy URL for your Workspace app (free)Platform overview

FAQ

Is a privacy policy link required for a Workspace Marketplace listing?

Yes. The Store Listing's Support links section requires Terms of service, Privacy policy and Support, each a link to a web page.

Where else does the privacy policy link go?

In the OAuth client configuration, on the consent screen; the program policies name both places.

What must the policy disclose?

How the product collects, uses and shares user data, including the types of parties it is shared with, and it must handle the data securely.